{"report_id":"7f83ca0e-ad30-48cb-a514-839862f0e425","version":6,"status":"done","tags":[],"date":"2026-03-23T09:44:17Z","url":{"schema":"https","addr":"phantomstake.co.kr","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"phantomstake.co.kr/","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"title":"Phantom","dom":{"size":29945,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26140)","md5":"e8dd58b0d221e0e53527d5c00e324049","sha1":"a32482538b0bd35897236b7276a77c9bc5ffbf11","sha256":"38aec9a5cc36438eb9de88a4d0adebba3f828413c515a26bbf30de1c2b64b7c8","sha512":"c51412cfe7cf9531618127adcabfec10b573fa316144e12446481aa8f593e062fe197d6921f3f290391d443c022bae6813af41e63250304ecea190c78f9da9bb","ssdeep":"768:JcZsbQZGZUldlHYzlonbmyrZwXe2Fm7hBD7Y8iwMo:+SAeeJrx","tlshash":"dfd20931b249146f7153cae9f7a17b3540aed28bc74f809cf5b8096297c7c9de8172a8","dom_hash":"domhashc15f9cfb9d4ad8ed8ae7c0e023881ae1","first_seen":"2026-03-23T09:44:24.542183Z","last_seen":"2026-03-23T09:44:24.542183Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"phantomstake.co.kr","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-27T09:44:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"phantomstake.co.kr","ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2026-03-23","domain_rank":0,"first_seen":"2026-03-23T09:44:18.852129Z","last_seen":"2026-03-23T09:44:18.852129Z","alert_count":0,"request_count":5,"received_data":1109890,"sent_data":3187,"comment":"","tags":null,"fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":144759,"sent_data":1794,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":1,"received_data":73798,"sent_data":541,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"phantomstake.co.kr/assets/index-C17Fvqrx.js","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9251fd1e821baf357df8f303a0b9d9e7","sha1":"e5d9a100fa0fd28e3cf8b2681cce9d5e9b27d1c3","sha256":"2266c60617ec6a70499b8f073b37588389017e044f82cf11d20165fcb662b1bf","sha512":"015be2a2a668f4910ec406d9522dda27e64268db157d6a0ecfd1cd91f6dd1cf1d2d3419d6c74c1b2be1ab9ec576b5b60b9940abe482abad6080d6a80ad9ea338","ssdeep":"24576:qN3XmJBzpraKRzjLl4uQD1Jqo1Yu7JE3WqNzkH65sid9m+:4mJBzpraKRzj54uQD1Jqo1Yu7J1YV5sA","tlshash":"0d256cc47182f5a99ba745e1003f500bf23e6e14b85d8450f17de8e53eb884aa277fad","size":1007280,"data":"","first_seen":"2026-03-23T09:44:24.549174Z","last_seen":"2026-03-23T09:44:24.549174Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"phantomstake.co.kr/","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-23T09:43:55.234Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomstake.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 04:11:50 GMT","end":"Sun, 21 Jun 2026 04:11:49 GMT"},"fingerprint":{"sha1":"B2:92:62:48:18:37:93:81:68:14:69:57:E9:9B:71:F9:95:A9:79:0B","sha256":"46:60:95:5C:78:49:84:1F:84:F4:03:11:69:C7:3B:9A:F6:22:E0:01:CA:80:86:4C:1D:FB:97:66:99:D8:E5:0C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: phantomstake.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncache-control: private, max-age=0\r\ncontent-length: 2043\r\ncontent-type: text/html; charset=utf-8\r\ndate: Mon, 23 Mar 2026 09:43:55 GMT\r\netag: W/\"7fb-19d1919abb0\"\r\nexpires: Mon, 23 Mar 2026 09:43:55 GMT\r\nlast-modified: Mon, 23 Mar 2026 05:10:06 GMT\r\nserver: Google Frontend\r\nset-cookie: GAESA=Cp4BMDBkYTZjZDJjNDU5ZTlkMDNhMmFjMTQ3ZTQzZTIyZDQ4MzEwYTljOGU1ZTUzNWNiYzBlZTAwZTFlYWJhMWI1NzNlNjM1MzJhYTBmNGIzNzY4ZWNkZTIzMmE0Njc4MTBmNmUzNzE5OTcwMTIxMzgzMTYyNDk0NDNiM2U0OTRjNTg3M2FlMTI1NTgwMGZjMjU5YWYzMzU0MWVmYTBmMTEQqr7R0NEz; expires=Wed, 22-Apr-2026 09:43:55 GMT; path=/\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1bb80ca6a1500e07b17d6d9a8257593b;o=1\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"RxJS","description":"RxJS is a reactive library used to implement reactive programming to deal with async implementation, callbacks, and event-based programs.","website":"https://reactivex.io","common_platform_enumeration":"","icon":"RxJS.png","categories":["JavaScript frameworks"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]}],"data":{"size":2043,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1432)","md5":"3d1eff30c47942947ed043ca2cda63ee","sha1":"e33b11f21b11c6f8fb4008969762a6711c8ed2f0","sha256":"5f243334f2f206d5ce331c560ea0549c4793f2e94e407dd6f6f1cb85fea45330","sha512":"ad14c3b465fcfcbfbc5fcd439547ae5a526167afdb4805519eba84422f2686be6aaf7f7a1671eb135562c0b19fe2fa61b84b83ea54479565852b1eadefc2a768","ssdeep":"","tlshash":"c4415ddf995b48a67020b17ab8d5be17040ab44f5bf998a0b483e957cdc97ccc853e14","first_seen":"2026-03-23T09:44:24.545429Z","last_seen":"2026-03-23T09:44:24.545429Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1414,"timings":{"blocked":619,"dns":568,"connect":12,"send":0,"wait":171,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.142.234","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:56.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"63:D1:AE:99:1E:49:D7:6C:71:F3:BA:F5:BA:47:74:1E:EB:90:E7:D6","sha256":"69:90:BB:9D:82:60:82:88:FF:CE:F6:B3:3D:DD:B5:B5:FB:F0:56:17:FD:FA:0D:BC:9C:5B:83:51:98:0D:2F:CF"}}},"request":{"raw":"GET /css2?family=Architects+Daughter\u0026family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026family=Fira+Code:wght@300..700\u0026family=Geist+Mono:wght@100..900\u0026family=Geist:wght@100..900\u0026family=IBM+Plex+Mono:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;1,100;1,200;1,300;1,400;1,500;1,600;1,700\u0026family=IBM+Plex+Sans:ital,wght@0,100..700;1,100..700\u0026family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900\u0026family=JetBrains+Mono:ital,wght@0,100..800;1,100..800\u0026family=Libre+Baskerville:ital,wght@0,400;0,700;1,400\u0026family=Lora:ital,wght@0,400..700;1,400..700\u0026family=Merriweather:ital,opsz,wght@0,18..144,300..900;1,18..144,300..900\u0026family=Montserrat:ital,wght@0,100..900;1,100..900\u0026family=Open+Sans:ital,wght@0,300..800;1,300..800\u0026family=Outfit:wght@100..900\u0026family=Oxanium:wght@200..800\u0026family=Playfair+Display:ital,wght@0,400..900;1,400..900\u0026family=Plus+Jakarta+Sans:ital,wght@0,200..800;1,200..800\u0026family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900\u0026family=Roboto+Mono:ital,wght@0,100..700;1,100..700\u0026family=Roboto:ital,wght@0,100..900;1,100..900\u0026family=Source+Code+Pro:ital,wght@0,200..900;1,200..900\u0026family=Source+Serif+4:ital,opsz,wght@0,8..60,200..900;1,8..60,200..900\u0026family=Space+Grotesk:wght@300..700\u0026family=Space+Mono:ital,wght@0,400;0,700;1,400;1,700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomstake.co.kr/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 23 Mar 2026 09:43:56 GMT\r\ndate: Mon, 23 Mar 2026 09:43:56 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144073,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"740eff5976ec5a7e25e3f9b01b1a637d","sha1":"69d18774433f2bc57102d8eff453e9e1f17e1304","sha256":"a98bedda5f431e420164188a09f11b4e42a514388f14a35426554fe6ffdc598e","sha512":"946fb22e81bae4341735ab6780ae2ff2eb44a23f296cd402875e71e1e38951a0bcb3add6e74dba013c6f6f54f69f327a32969dcc7a30bc45004373f3b9664e72","ssdeep":"768:CHFCevmEAr+gCS5xFJNGo6n3wafwe0utoEA3mknCiFyg2UfIUk+H00YNRYj7V3Et:xVXPNo6mACNqHvDyWNpQ9","tlshash":"fce31e91042b9004eb831cc233cfbe36ee4ea2657444d579affe1d99ac9bc265364b1d","first_seen":"2026-02-20T03:22:56.053146Z","last_seen":"2026-05-12T22:57:26.546803Z","times_seen":296,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":54,"dns":1,"connect":9,"send":0,"wait":31,"receive":0,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomstake.co.kr/assets/index-C17Fvqrx.js","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:56.219Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomstake.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 04:11:50 GMT","end":"Sun, 21 Jun 2026 04:11:49 GMT"},"fingerprint":{"sha1":"B2:92:62:48:18:37:93:81:68:14:69:57:E9:9B:71:F9:95:A9:79:0B","sha256":"46:60:95:5C:78:49:84:1F:84:F4:03:11:69:C7:3B:9A:F6:22:E0:01:CA:80:86:4C:1D:FB:97:66:99:D8:E5:0C"}}},"request":{"raw":"GET /assets/index-C17Fvqrx.js HTTP/1.1\r\nHost: phantomstake.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomstake.co.kr/\r\nCookie: GAESA=Cp4BMDBkYTZjZDJjNDU5ZTlkMDNhMmFjMTQ3ZTQzZTIyZDQ4MzEwYTljOGU1ZTUzNWNiYzBlZTAwZTFlYWJhMWI1NzNlNjM1MzJhYTBmNGIzNzY4ZWNkZTIzMmE0Njc4MTBmNmUzNzE5OTcwMTIxMzgzMTYyNDk0NDNiM2U0OTRjNTg3M2FlMTI1NTgwMGZjMjU5YWYzMzU0MWVmYTBmMTEQqr7R0NEz\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 1007280\r\ncontent-type: text/javascript; charset=utf-8\r\ndate: Mon, 23 Mar 2026 09:43:56 GMT\r\netag: W/\"f5eb0-19d1919abb0\"\r\nlast-modified: Mon, 23 Mar 2026 05:10:06 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 0153a356c2d0164e4339ce6a80d3a42d\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]}],"data":{"size":1007280,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (37787)","md5":"9251fd1e821baf357df8f303a0b9d9e7","sha1":"e5d9a100fa0fd28e3cf8b2681cce9d5e9b27d1c3","sha256":"2266c60617ec6a70499b8f073b37588389017e044f82cf11d20165fcb662b1bf","sha512":"015be2a2a668f4910ec406d9522dda27e64268db157d6a0ecfd1cd91f6dd1cf1d2d3419d6c74c1b2be1ab9ec576b5b60b9940abe482abad6080d6a80ad9ea338","ssdeep":"24576:qN3XmJBzpraKRzjLl4uQD1Jqo1Yu7JE3WqNzkH65sid9m+:4mJBzpraKRzj54uQD1Jqo1Yu7J1YV5sA","tlshash":"0d256cc47182f5a99ba745e1003f500bf23e6e14b85d8450f17de8e53eb884aa277fad","first_seen":"2026-03-23T09:44:24.549174Z","last_seen":"2026-03-23T09:44:24.549174Z","times_seen":1,"resource_available":true,"data":null}},"time_used":756,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":558,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomstake.co.kr/assets/index-cOras0dU.css","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:56.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomstake.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 04:11:50 GMT","end":"Sun, 21 Jun 2026 04:11:49 GMT"},"fingerprint":{"sha1":"B2:92:62:48:18:37:93:81:68:14:69:57:E9:9B:71:F9:95:A9:79:0B","sha256":"46:60:95:5C:78:49:84:1F:84:F4:03:11:69:C7:3B:9A:F6:22:E0:01:CA:80:86:4C:1D:FB:97:66:99:D8:E5:0C"}}},"request":{"raw":"GET /assets/index-cOras0dU.css HTTP/1.1\r\nHost: phantomstake.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomstake.co.kr/\r\nCookie: GAESA=Cp4BMDBkYTZjZDJjNDU5ZTlkMDNhMmFjMTQ3ZTQzZTIyZDQ4MzEwYTljOGU1ZTUzNWNiYzBlZTAwZTFlYWJhMWI1NzNlNjM1MzJhYTBmNGIzNzY4ZWNkZTIzMmE0Njc4MTBmNmUzNzE5OTcwMTIxMzgzMTYyNDk0NDNiM2U0OTRjNTg3M2FlMTI1NTgwMGZjMjU5YWYzMzU0MWVmYTBmMTEQqr7R0NEz\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 97155\r\ncontent-type: text/css; charset=utf-8\r\ndate: Mon, 23 Mar 2026 09:43:56 GMT\r\netag: W/\"17b83-19d1919abb0\"\r\nlast-modified: Mon, 23 Mar 2026 05:10:06 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 1299c0612dc86e8f4339ce6a80d3ac8e\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97155,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"686e479ef518b442341661e481d4a326","sha1":"e1ff9da9fb1925dff4968cc4a0225472e4cc381d","sha256":"30a7726f58bb6b0ff33725b82760ff06d4d23c1b95de7ee38e88dc9657aa8920","sha512":"1bae1beceff78b158d1493f0c525bbafea2e508aaffb7c0c62f431870437204cb0fc43283b5e36159e0cb4ec1d8b57ddedc3f4466bd8933644f95239b8347a3b","ssdeep":"1536:Zofh7+ok1NGM4L5mBOw8X63MUf5MGtfC378VQZkt5FxPbTNzg:Zofh7+ok1NGM4L5Tw84MUf5MGtfC378E","tlshash":"b593762dba59503f3d6750f4d28cbaace10bf1c0de3a46eabd86412167d23f65ca7604","first_seen":"2026-03-23T09:44:24.556817Z","last_seen":"2026-03-23T09:44:24.556817Z","times_seen":1,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":209,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomstake.co.kr/api/auth/me","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:57.221Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomstake.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 04:11:50 GMT","end":"Sun, 21 Jun 2026 04:11:49 GMT"},"fingerprint":{"sha1":"B2:92:62:48:18:37:93:81:68:14:69:57:E9:9B:71:F9:95:A9:79:0B","sha256":"46:60:95:5C:78:49:84:1F:84:F4:03:11:69:C7:3B:9A:F6:22:E0:01:CA:80:86:4C:1D:FB:97:66:99:D8:E5:0C"}}},"request":{"raw":"GET /api/auth/me HTTP/1.1\r\nHost: phantomstake.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://phantomstake.co.kr/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: GAESA=Cp4BMDBkYTZjZDJjNDU5ZTlkMDNhMmFjMTQ3ZTQzZTIyZDQ4MzEwYTljOGU1ZTUzNWNiYzBlZTAwZTFlYWJhMWI1NzNlNjM1MzJhYTBmNGIzNzY4ZWNkZTIzMmE0Njc4MTBmNmUzNzE5OTcwMTIxMzgzMTYyNDk0NDNiM2U0OTRjNTg3M2FlMTI1NTgwMGZjMjU5YWYzMzU0MWVmYTBmMTEQqr7R0NEz\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 Unauthorized\r\ncache-control: no-cache, no-store, must-revalidate\r\ncontent-length: 42\r\ncontent-type: application/json; charset=utf-8\r\ndate: Mon, 23 Mar 2026 09:43:57 GMT\r\nexpires: 0\r\npragma: no-cache\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 076a8a8eca9c18424339ce6a80d3ac06\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":42,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7caa6a5541f20222b522ab49c70b25f7","sha1":"9477c0206293003ad56c7fd4a1ae15f9804bae1a","sha256":"2549f711136529ebad738ad96ec83026910e133515d448439273884f56260972","sha512":"28438ebe69e75fb2983e363f8fb9a401dad9fa6bae36447a030b3da1b1a9c599ee084c81ccf4cf1e50dc3611130b806f200a3170483920d127398f195242dff9","ssdeep":"","tlshash":"f99004113010fd0fd3450f1174747434410c4443434754c3c50c7ffc57544dd7011110","first_seen":"2026-03-23T09:44:24.558405Z","last_seen":"2026-03-23T09:44:24.558405Z","times_seen":1,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:57.245Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:21:09 GMT","end":"Mon, 18 May 2026 18:21:08 GMT"},"fingerprint":{"sha1":"D5:23:F9:83:DE:D4:E8:AB:85:EF:63:D4:2C:6E:62:44:96:04:04:8E","sha256":"D3:04:E0:CB:3E:1B:51:D2:DD:21:AB:B5:3E:6D:E3:40:D7:D5:1E:07:D1:8A:BF:8C:CC:01:FC:AE:92:1F:69:2D"}}},"request":{"raw":"GET /s/inter/v20/UcCo3FwrK3iLTcviYwYZ90A2N58.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://phantomstake.co.kr\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 72964\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 22 Mar 2026 10:06:21 GMT\r\nexpires: Mon, 22 Mar 2027 10:06:21 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:18 GMT\r\ncontent-type: font/woff2\r\nage: 85056\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":72964,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 72964, version 1.0","md5":"91247c94dcda6ff52b445d71d6bbfb81","sha1":"ad2f62363ed047b430b91f32afa31df51fcd7c5e","sha256":"6a3c3e024b31eeacbf1f19c3c7be78612d91c623186f64035a50038241dad4f9","sha512":"a12dcac84e9f9ae02df3aabe29d76994281cd1005edca471194605cfcd6a0456eec872fd28c63c72ae124804d0b47d8377048caae49c40b0a18b5d6be4d6213f","ssdeep":"768:zbw+rLBkMxbCkupj4Y69/Yr71+j9pWiKahMM6+AWEqXB0oGuNGku+QCcIKE205C7:zbw+iwuS/iZWeaO1zP1/9Esvf8fXnm1","tlshash":"8f6302244e3c50c2a54d33aa286940f6f6e79c75b2b79ba4a69c589cd410f329cdfdc4","first_seen":"2025-05-29T18:51:13.223047Z","last_seen":"2026-08-04T22:20:30.276963Z","times_seen":31375,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":60,"dns":1,"connect":8,"send":0,"wait":9,"receive":13,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"phantomstake.co.kr/favicon.svg","fqdn":"phantomstake.co.kr","domain":"phantomstake.co.kr","tld":"co.kr"},"ip":{"addr":"34.111.179.208","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://phantomstake.co.kr/","date":"2026-03-23T09:43:57.436Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"phantomstake.co.kr","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 04:11:50 GMT","end":"Sun, 21 Jun 2026 04:11:49 GMT"},"fingerprint":{"sha1":"B2:92:62:48:18:37:93:81:68:14:69:57:E9:9B:71:F9:95:A9:79:0B","sha256":"46:60:95:5C:78:49:84:1F:84:F4:03:11:69:C7:3B:9A:F6:22:E0:01:CA:80:86:4C:1D:FB:97:66:99:D8:E5:0C"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: phantomstake.co.kr\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://phantomstake.co.kr/\r\nCookie: GAESA=Cp4BMDBkYTZjZDJjNDU5ZTlkMDNhMmFjMTQ3ZTQzZTIyZDQ4MzEwYTljOGU1ZTUzNWNiYzBlZTAwZTFlYWJhMWI1NzNlNjM1MzJhYTBmNGIzNzY4ZWNkZTIzMmE0Njc4MTBmNmUzNzE5OTcwMTIxMzgzMTYyNDk0NDNiM2U0OTRjNTg3M2FlMTI1NTgwMGZjMjU5YWYzMzU0MWVmYTBmMTEQqr7R0NEz\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\ncontent-length: 605\r\ncontent-type: image/svg+xml\r\ndate: Mon, 23 Mar 2026 09:43:57 GMT\r\netag: W/\"25d-19d1919abb0\"\r\nlast-modified: Mon, 23 Mar 2026 05:10:06 GMT\r\nserver: Google Frontend\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-cloud-trace-context: 6d6fede5f40379f34339ce6a80d3a4f2\r\nx-powered-by: Express\r\nvia: 1.1 google\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Google Cloud Trace","description":"Google Cloud Trace is a distributed tracing system that collects latency data from applications and displays it in the Google Cloud Console.","website":"https://cloud.google.com/trace","common_platform_enumeration":"","icon":"google-cloud-trace.svg","categories":["Performance"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Cloud CDN","description":"Cloud CDN uses Google's global edge network to serve content closer to users.","website":"https://cloud.google.com/cdn","common_platform_enumeration":"","icon":"google-cloud-cdn.svg","categories":["CDN"]},{"name":"Google Cloud","description":"Google Cloud is a suite of cloud computing services.","website":"https://cloud.google.com","common_platform_enumeration":"cpe:2.3:a:google:cloud_platform:*:*:*:*:*:*:*:*","icon":"Google Cloud.svg","categories":["IaaS"]}],"data":{"size":605,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d88d10567e1b711d2d7cef06d6e5b641","sha1":"59b229c9bd1345342432347f0911fd47322781bd","sha256":"9f6ec38bad65b704d676246eb4469ff27e447e72d031c9a377d2e620cf02e122","sha512":"3f15ccdc9d85e61e024b91b9bac05a3fed42fc79f3de49b1c47ff2adf7a57502ae942657162796150cebd62f91fb3416f3c59c2eb5ed16d2993af8beba0ff20e","ssdeep":"","tlshash":"c6f0a626d2cc8803c828c2099baa9472a61ee1c3cd058201f198be2d6f2c4c73c0e6f4","first_seen":"2026-03-23T09:44:24.56012Z","last_seen":"2026-03-23T09:44:24.56012Z","times_seen":1,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
